Cybercrime Incidents Research Articles

A comprehensive survey of cybercrimes in India over the last decade

Since the 1990s, the integration of technology into daily life has led to the creation of an extensive network of interconnected devices, transforming how individuals and organizations operate. However, this digital transformation has also spurred the rise of cybercrime, criminal activities perpetrated through networks or computer systems. Cybercrime has become a global concern, presenting significant challenges to security systems. Although advancements in digital technology have enhanced efficiency, they have also opened new avenues for exploitation by cybercriminals, highlighting the urgent need for advanced cybersecurity measures. The escalating number of cyberattacks and associated risks in the past decade highlights the critical importance of protecting sensitive data and safeguarding information systems. Cybercrimes range from financial fraud and phishing scams to identity theft and online harassment, posing substantial risks to both individuals and organizations. In response, governments, law enforcement agencies, and cybersecurity units have intensified their efforts to address these threats. In recent years, India has experienced a significant surge in cybercrime incidents, with a notable increase in cases involving ransomware, data breaches, and social engineering attacks. The growing penetration of internet services, the expansion of e-commerce, and the rapid adoption of digital payment systems have made individuals and organizations more vulnerable to cyber threats. Key areas affected include banking, healthcare, and government sectors, which are frequently targeted due to the sensitive nature of the data they handle. To combat these risks, there is an increasing focus on public awareness, cybersecurity education, and robust regulatory frameworks. This paper provides an in-depth analysis of cybercrime, with a focus on developing innovative prevention strategies, strengthening internal security protocols, and classifying key cybercrime terminologies to better understand their implications for digital infrastructure.

Volatile data acquisition and analysis by using Memory Forensics techniques

Memory forensics is a vital component of digital investigations, involving the analysis of volatile memory (RAM) in computer systems to gather evidence, identify malicious activities, and reconstruct cybercrime incidents. This paper provides an overview of memory forensics, highlighting its definition, importance, purpose, and scope. It explores the evolution and significance of memory forensics in response to increasingly complex cyber threats. The memory forensics process is discussed, covering memory acquisition and analysis. Legal and ethical considerations related to the admissibility of memory evidence and privacy protection are examined. The paper also discusses the types of memory, including physical and virtual memory, and their characteristics and significance in memory forensics. Furthermore, it explores the memory acquisition process, different methods, tools, and techniques used, as well as the importance of preserving evidence integrity. Finally, the paper introduces various tools for memory analysis, such as Volatility, Volatility Workbench, FTK Imager, Encase, Hibernation Recon, and Xplico, and highlights their role in extracting valuable evidence from memory dumps.

Primers on Adventurous Psychology and Risk Perception Bias among Cybercrime Helpers

In the context of the growing prevalence of the Internet, the incidence of cybercrime is increasing at a rapid pace. This has led to the emergence of cybercrime helpers, who have become a significant and pervasive phenomenon that cannot be overlooked. This paper addresses the psychological characteristics of those who engage in cybercrime. A combination of literature study and empirical research allows for a preliminary analysis of the risk-taking psychology and risk perception bias of cybercrime helpers. It also provides new ideas and directions for the study of curbing cybercrime and offers prevention and intervention strategies targeting the psychological level of low-age and social individuals. The study revealed that the risk-taking psychology and risk perception bias of cybercrime helpers are closely intertwined, influencing each other to prompt criminal behaviour. The findings offer implementation strategies with practical value for cybercrime governance.

Measuring Cybercrime in Calls for Police Service

Conventional police databases contain much information on cybercrime, but extracting it remains a practical challenge. This is because these databases rarely contain labels that could be used to automatically retrieve all cybercrime incidents. In this article, we present a supervised machine learning method for extracting cybercrime incidents in calls for police service datasets. Data from the Korean National Police (2020, 9 months, N = 15 million call logs) is used for the demonstration. We combined methods of keyword query selection, minority oversampling, and majority voting techniques to develop a classifier. Three classification techniques, including Naïve Bayes, linear SVM, and kernel SVM, were tested, and the kernel model was chosen to build the final model (accuracy, 93.4%; F1-score, 92.4). We estimate that cybercrime only represents 4.6% of the cases in the selected dataset (excluding traffic-related incidents), but that it can be prevalent with some crime types. We found, for example, that about three quarters (76%) of all fraud incidents have a cyber dimension. We conclude that the cybercrime classification method proposed in this study can support further research on cybercrime and that it offers considerable advantages over manual or keyword-based approaches.

Contribution to Securing BYOD Systems in Financial Authorities and Public Administrations in Free Trade Zones

The growth of digital tools, such as mobile phones, computers, and tablets, and the advent of new information and communication technologies have generated new phenomena in terms of communication capacity and data processing. This phenomenon is called BYOD, which stands for Bring Your Own Device, meaning employees use their own devices to access company resources within the company's IT network, whether internally or externally. On the one hand, it has brought many benefits and opportunities, but on the other hand, it carries many cybersecurity risks. Incidents of cybercrime, embezzlement, espionage, and cyberattacks. These are recorded every day in ZELECAF countries in general and in Congo Brazzaville in particular. In this article, a contribution and optimization to the security of BYOD systems in the financial authorities of the countries of the African Continental Free Trade Area are presented. Congo Brazzaville was chosen for the field study, and a few Central African countries were chosen for an online study. The results obtained are encouraging to the extent that the survey carried out revealed the use of digital tools in financial management by workers. Also, the lack of solid security in the existing computer networks within these structures was noted. The principles of raising public awareness of cybersecurity culture, protecting information, authenticating passwords by the IT manager or network administrator, hiding the wireless network, and enabling the firewall are part of the attempted solutions proposed. Compared to studies in the literature, the methodology is adapted, so that in the literature [14], [15], the majority of surveys were carried out in the field, with a very limited number.

Mobile Forensic Investigation on iOS & Android Smartphones: Case Study Investigation on WhatsApp

Following the exponential growth of information and communication technologies, the smartphone market, as well as advances in wireless data networks (3G and 4G), has accelerated. Mobile apps for social networking and instant messaging have been created by these firms. Other instant messaging (IM) smartphone programs like WhatsApp (WA), Viber, and IMO have also been created. WA is the most widely used instant messaging program. With WA, you can send and receive messages in a variety of formats, including text, voice, video, and documents. Various cybercrime incidents were committed through WA's. WA use leaves several artifacts that may be examined to detect the digital evidence. In addition, iOS and Android are two of the most popular smartphone operating systems. Because of this, the inquiry will involve the use of forensic investigative techniques and methodologies. Forensics on both iOS and Android cellphones were utilized to investigate a digital crime that was believed to have been perpetrated in WA. To conclude the investigation, we analyzed chat logs, phone records, and other media to gather proof. Legal framework and established processes were used to guarantee that evidence was preserved from change or destruction and that the witness's account was acceptable in court throughout the investigative process. It was finally stated that the inquiry and evidence had been presented. As a result, WA forensic artifacts might be evaluated and found effectively utilizing the mobile forensic procedure.

Volatile Data Acquisition and Analysis by Using Memory Forensics Techniques

Memory forensics is a vital component of digital investigations, involving the analysis of volatile memory (RAM) in computer systems to gather evidence, identify malicious activities, and reconstruct cybercrime incidents. This paper provides an overview of memory forensics, highlighting its defini-tion, importance, purpose, and scope. It explores the evolution and significance of memory forensics in response to increasingly complex cyber threats. The memory forensics process is discussed, cover-ing memory acquisition and analysis. Legal and ethical considerations related to the admissibility of memory evidence and privacy protection are examined. The paper also discusses the types of memory, including physical and virtual memory, and their characteristics and significance in memory forensics. Furthermore, it explores the memory acquisition process, different methods, tools, and techniques used, as well as the importance of preserving evidence integrity. Finally, the paper introduces various tools for memory analysis, such as Volatility, Volatility Workbench, FTK Imager, Encase, Hibernation Recon, and Xplico, and highlights their role in extracting valuable evidence from memory dumps.

Using the theory of interpersonal behaviour to explain employees’ cybercrime preventative behaviour during the pandemic

Purpose The COVID-19 pandemic necessitated a significant shift in how employees executed their professional responsibilities. Concurrently, the incidence of cybercrime experienced a noteworthy surge due to the increased utilisation of cyberspace. The abrupt transition to telecommuting altered the interpersonal dynamics inherent in traditional work environments. This paper aims to examine the impact of interpersonal factors on the cybercrime preventative measures adopted by telecommuting employees. Design/methodology/approach A conceptual model, grounded in the Theory of Interpersonal Behaviour, is evaluated through an online survey. The data set comprises responses from 209 employees in South Africa, and the analysis uses partial least squares structural equation modelling. Findings The results reveal substantial predictive power to explain cybercrime preventative behaviours. Notably, the study underscores the significant influence of habit and affect on intention and subsequent behaviour. Practical implications The results suggest that practitioners should give due attention to emotional dimensions (affect) as a catalyst for information security behaviour. The formulation of employees’ information security responsibilities should be pragmatic, fostering subconscious compliance to establish routine behaviour (habit). Originality/value This research underscores the pivotal roles played by habit and emotions in shaping behavioural patterns related to information security. Furthermore, it provides researchers with an illustrative model for operationalising these constructs within the realm of security. The results contribute additional perspectives on the repercussions of the COVID-19 pandemic on cybercrime preventative behaviours.

Cybercrime Classification: A Victimology-based approach

The need for understanding cybercrime and the possibility of its occurrence is significant to mitigate its adverse effects on society. A comprehensive universally agreed-upon classification scheme for cybercrime is hugely lacking in terms of utilizing a complete perspective of the entities involved in the same. A new perspective in cybercrime classification is moving beyond the machines and focusing on the humans, especially the victims. Cyber victimization extends from the single user to a mass or system perspective, thereby representing governments, organizations, and society to be categorized as victims. This paper proposes a novel ontological classification of cyber victimology that can help illustrate the complete cybercrime incident from the perspective of the victim. We utilize a multidimensional typology to represent the dimensions and classifications of the cybercrime victim. We then analyse the semantic relationships between the ontological objects to develop a comprehensive victimology representation. The understanding of the type and role of the victim provides new insight into the analysis of the cyber incident. Moreover, the resultant representation can serve as an extension to current cybercrime ontological frameworks and help in providing a new point of defence in cybercrime incidents. Finally, such a victimology-based classification can subsequently result in a dynamic ontology which can be queried to obtain relevant insights into the nature and occurrence of cybercrimes.

Phenomenom Cyber Crime in Indonesia in the Digitalization Era

Science and technology are increasingly developing rapidly and advancing, offering various interactions in human life. Information and communication technology continues to develop in the digital era, especially the internet, which has a big influence on people's life patterns. The development of the internet has triggered the emergence of a type of cyber crime which is usually known as Cyber Crime. Various cases of cyber crime (Cyber Crime) have emerged in Indonesia, especially in the banking sector. In the following years until now, in Indonesia there have been many incidents of Cyber Crime, for example computer program piracy, cracking, bank burglary (banking fraud), unauthorized use of other parties' credit cards (carding), pornography, including crimes against domain names (domain names). Cyber Crime could happen because unlimited internet access. Apart from that, computer user negligence is also often the cause of this Cyber Crime. This is something that is often overlooked, namely a weak network security system. In fact, a weak network security system creates a big loophole for people who intend to commit crimes. Currently, what is used as the legal basis for Cyber ??Crime cases in Indonesia isLaw Number 11 of 2008 concerning Information and Electronic Transactions (ITE). The ITE Law consists of 13 chapters and 54 articles which explain in detail the rules for living in cyberspace and the transactions that occur therein. Prohibited acts (cybercrime) are explained in Chapter VII (Articles 27-37)

DIGITAL MARKETING, CYBERCRIME, AND ISLAMIC BUSINESS ETHICS A CASE STUDY IN INDONESIA

This study aims to explore digital marketing in-depth, and cybercrime in the business sector in Indonesia. This study investigates the important contribution of Islamic business ethics in anticipating cybercrimes in the digital economy in Indonesia. The impact of digital marketing and cybercrime incidents on the business sector needs to be investigated further in order to minimize the occurrence of cybercrime, such as in e-Commerce Shopee, Tokopedia and some of them by using a qualitative approach and case studies. One of the triggers for incidents of cybercrime is due to the use of digital marketing which has now gone global, but self-awareness is weak so it is necessary to internalize the values of Islamic business ethics in order to prevent it from within oneself. This study focuses on the economic and business sectors so that the findings can be generalized to other sectors. Then, a descriptive analysis study was used to explore case by case to help categorize research findings. Awareness of information and communication technology security has received less attention due to the proliferation of digital technology innovations which have implications for cybercrimes in the economic and business sectors. Therefore, it is important for business people (users, consumers, and society) to realize that business ethical values are very important in achieving success, not just materially but non-materially. This study describes in depth the benefits of digital marketing on the one hand, and on the other hand the negative impact that results in cybercrime. This study also raises awareness among business people about the importance of Islamic business ethics in the economic and business sectors.

Content Analysis of Cybercrime Infographic

Malaysia is one of the vulnerable regions of cyberattack in which cybercrimes continue to increase at alarming rate. Cyber criminals are attacking not only organisations but also individuals. Various types of cybercrimes that have resulted in significant financial losses have been reported in the media. Despite the daily coverage of cybercrime incidents, people continue to fall victims. Keeping the public informed of the potential online threats should not be taken for granted. This study argues that effective communication of cybersecurity information is essential to enhance public’s resilience in dealing with cybercrimes. Infographic is a useful tool for conveying cybersecurity information. Infographic is a visual communication that is often used to communicate complex messages that include science related information. Literature on infographics often emphasizes on its key components that include; visual, content and knowledge. As a visual form of communication, it makes information appear to be appealing and easier to understand to diverse types of publics. The format could be easily shared with others through different types of social media platforms. This study examined infographics related to cybercrimes from CyberSecurity Malaysia’s Facebook account. Visual content analysis has been adopted to analyse more than 20 infographics based on content, visual and knowledge. The study found the content of infographics was mainly text and graphic with instructive guidelines. However, the visual elements appear cluttered, potentially compromising the efficacy of the conveyed message. Keywords: Infographic, cybercrimes, scam, CyberSecurity Malaysia, cyberthreat.

Machine Learning Sentiment Analysis in Cyber Threat Intelligence Recommendation System

The use of the digital world is increasing every day. Attacks and data theft occur on various websites, both government-owned and commercial and banking sites. Therefore, this research aims to identify the threats of frequently occurring viruses in a country. There is a considerable amount of news explaining cybercrime incidents. The problem of this research is that unstructured data such as articles and technical reports are difficult to analyze and identify the types of cybercrime attacks. Previous research attempted to semantically extract unstructured cyber threats, but there were shortcomings in previous research. The novelty of this research is the development of a Cyber Threat Intelligence (CTI) machine learning model to identify the types of virus attacks or cybercrimes that frequently occur in e-commerce transactions, so that they can take rescue actions for incident handling in the digital world using tactics, techniques, and procedures (TTP). The method involves using machine learning, taking Cyber Threat Intelligence (CTI) documents as input regarding cybersecurity threat handling steps, and then processing the data using AI TF-IDF and Bags of Words for the identification of steps, tactics, techniques, and procedures required for each frequently occurring security incident.

Optimal defense resource allocation against cyber-attacks in distributed generation systems

The deployment of advanced information and communication technologies necessitates considering new security threats, such as distributed denial of service attacks and malware, which can fault power generators and feeders and exacerbate power outages in distributed generation systems (DGS). Existing cyber-security studies fail to validate the attacker–defender game model between operators and hackers or provide a DGS model that accounts for realistic characteristics and operations. Furthermore, current game models may be infeasible for large-scale systems and are not robust against uncertainties owing to the use of metaheuristic algorithms. To overcome these gaps, this study quantified the result of a game using the contest success function and estimated the parameters of this function based on real-world evidence: the dataset of cyber crime incidents from Advisen, US. The DGS management was optimized using the power flow model considering the scenario-based uncertainty stemming from cyber-attacks. A three-stage attack+defend–defend–attack framework is proposed to optimize attack–defense resource allocation using the cooperative game and [Formula: see text]-subgradient method. The results for IEEE 4, 13, 34, 123 and 342 test node feeders show that the proposed framework is applicable to large-scale systems and robust to various types of cyber-attacks. The proposed model and algorithms further enhance the DGS performance under uncertainties by protecting the entire grid or only critical nodes according to the defenders’ objectives.

Quantitatively examining the interaction between cybercrime and physical crime

This study examined the differences and relationships between reported incidents of cybercrime and physical crime within U.S. society nationally. The examined period encompassed the years between 2001 and 2020. The study outcomes showed that a relationship existed between reported incidents of cybercrime and reported incidents of physical crime (p = 0.00; α = 0.05). More specifically, it appeared that relationships existed between the reported incidents of cybercrime and the reported incidents of physical crimes representing robbery rate (p = 0.01; α = 0.05), burglary rate (p = 0.00; α = 0.05), and larceny theft rate (p = 0.00; α = 0.05). It also appeared that a difference (p = 0.00; α = 0.05) existed between reported incidents of cybercrime and physical crime, wherein greater quantities of physical crime were exhibited societally during the examined period.

Understanding Cybersecurity Behavior in the Banking Industry Using Protection Motivation Theory

The widespread adoption of digital technology has brought about significant transformations in various industries, including banking, where internet-based applications are used extensively for customer transactions. However, along with these advancements, there has been a parallel increase in cybercrime incidents, posing serious challenges for individuals and organizations. In Indonesia, this issue is particularly pronounced, with the country ranking as the eighth globally and the highest in Southeast Asia for the number of data breaches in 2022 (Dihni, 2022). Among the various forms of cybercrime, online fraud, such as phishing scams targeting banking customers, has become increasingly prevalent, leading to substantial financial losses (CNN Indonesia, 2022). In response to this alarming trend, regulatory bodies in Indonesia, including the Financial Services Authority and the Indonesian Central Bank, have devised a roadmap to strengthen IT security systems and mitigate cyber risks in the banking sector. While measures have been implemented to counter cybercrime risks, the perception of users regarding these threats often goes unnoticed. Previous research has primarily focused on individual awareness of cybercrime threats, overlooking the influence of perceived knowledge and protection habits on cybersecurity behavior (Shappie et al., 2019; Kimpe et al., 2021; Zwilling et al., 2022). Keywords: Cybersecurity behaviour, Mobile banking, Perceived knowledge, Protection habit, Protection Motivation Theory (PMT)

Approaches to cyber security in small and medium-sized enterprises: Why it needs to change

Over the last decade, the growth in technology has created numerous opportunities for businesses to improve efficiency, develop new products and services and reach new customers. But it has also provided an opportunity for the criminal fraternity to find new, and incredibly lucrative, ways of targeting victims from anywhere in the world. This has led to cybercrime becoming one of the fastest-growing types of crime affecting individuals, businesses and third-sector organisations alike. For example, in England and Wales, official government statistics show the number of cybercrime incidents has risen by 89 per cent in the past year alone. This paper describes the effect cybercrime has on small and medium-sized enterprises (SMEs), in particular those at the smaller end of the spectrum. The paper explains why SMEs are among the most vulnerable to a breach or an attack and what challenges they face against this growing threat. The paper also describes what the UK government is doing to support SMEs specifically.

Kontroversi Hacker Bjorka: Analisis Isi Kuantitatif Strategi Pemulihan Citra

Cyber Crime in Indonesia in 2022 had a significant increase. One of the cybercrimes was the Bjorka Hacker case. The background of this research is a cybercrime incident committed by Hacker Bjorka against the information security system of the Indonesian government. Hacker Bjorka claimed to have personal data and information of individuals as well as several national organizations. It creates a panic situation among the public. The alleged leak of information makes the Ministry of Communication and Information Technology in the spotlight to be responsible for responding to that crisis situation. Finally, the response of Kominfo becomes very important in this controversy. In order to describe the Kominfo strategy, this research uses quantitative descriptive methods. The population is the statements from Kominfo in response to the Bjorka controversy, that are published in the online media kompas.com in September 2022. The sample is taken by using a purposive sampling method. The results showed that the statements made by Kominfo published by kompas.com were proven to use several strategies for image improvement. The strategies used by Kominfo are denial, corrective action, defeasibility, and minimization. The strategy that is not used is mortification or apologizing.

The Role of Cybersecurity Knowledge and Awareness in Cybersecurity Intention and Behavior in the United States

Despite the rapid escalation of cybercrimes in modern society, few viable cybersecurity and cybercrime prevention programs exist. Consequently, this research considers cybersecurity as a key element for mitigating the potential risk and incidents of cybercrime. The study aims to understand the role of individuals’ cybersecurity knowledge and awareness in shaping their cybersecurity intention and behavior in the United States. The results reveal that information and communications technology variables, education, income, and gender are contributing predictors of a level of cybersecurity knowledge. The effects of information and communications technology variables varied across gender for both correct and uncertain responses. The findings highlight the importance of a comprehensive understanding of both technical and human/individual factors for cybersecurity knowledge and education.

Impact Analysis of Web Application Firewall on Website-Based Application Security (Case Study PPDB Kak Seto School Website)

The swift advancement of web-based applications has posed security challenges. Insufficient security awareness among web developers has resulted in a surge of cybercrime incidents due to website vulnerabilities. To counter this, implementing a Web Application Firewall (WAF) is proposed for the vulnerable PPDB Sekolah Kak Seto website, aiming to mitigate threats in the public network. The WAF acts as a defense against potential cyber breaches. Employing an experimental approach, this research encompasses identification, observation, literature review, analysis of WAF system requirements, implementation, testing, and pre/post-implementation analysis using ModSecurity as the security system. The study analyzes the impact of WAF adoption and provides recommendations for enhancing security. Findings demonstrate WAF's effectiveness in fortifying the Kak Seto School web application by efficiently identifying and blocking potential attacks, thereby reducing breach success rates. Post-WAF implementation, Pingdom tests show a slight drop in Performance Grade (70 to 69) and a minor increase in Load Time (2.76 to 3.23 seconds). GTmetrix tests reveal a Grade downgrade from B to C and an increase in Largest Contentful Paint time (2.2 to 2.7 seconds). In conclusion, despite minor performance effects, WAF significantly enhances security, as evident in improved loading times during tests.